Indeed. Scratch a working heterogenous single sign-on environment based on Linux servers and I think you'll find well-paid admin staff behind it. Interop is just not simple, although with Samba 4 it might just have got better - I've not tried in the last 6 months.
